Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          UUnLuOL939vgN8yHUNX6qQHuL0Qp5IboszqaVKsWV5I=
Subject key identifier:   EB:EA:5D:8B:10:CA:E9:7D:CC:21:E8:49:62:46:0D:FF:54:D7:31:2F
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019882E76B70BCAF061D04E45E13202E90F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1635
Signing time:             Thu 07 Aug 2025 05:01:01 +0000
Manifest this update:     Thu 07 Aug 2025 05:01:01 +0000
Manifest next update:     Fri 08 Aug 2025 05:01:01 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: njqAXUiwm/JbUYo40zbTkaIwrQLdaMAbHmpTVdkqfi4=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:e7:6b:70:bc:af:06:1d:04:e4:5e:13:20:2e:90:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Aug  7 05:01:01 2025 GMT
            Not After : Aug  8 05:01:01 2025 GMT
        Subject: CN=ebea5d8b10cae97dcc21e84962460dff54d7312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:c3:b8:a3:5f:01:4b:de:21:69:5d:71:bf:
                    e9:37:38:81:a0:77:9b:5f:ff:58:44:dc:a8:d2:9d:
                    30:f3:22:03:d6:4f:75:4b:89:84:5e:d2:47:b5:7c:
                    64:75:58:ee:ba:d3:b2:cd:7c:e1:c2:69:4d:81:89:
                    42:67:ea:db:6e:04:e0:95:3a:fb:df:8b:d3:1c:1e:
                    45:c4:16:2a:41:9d:44:41:29:31:0b:0b:80:da:c1:
                    9f:e4:77:8f:87:ef:ac:c9:57:31:92:0a:f7:5c:0e:
                    78:b3:ab:2d:56:26:c1:29:de:b6:9f:c0:a7:fc:71:
                    7a:c1:d0:10:c3:1c:fa:6b:dd:0c:72:0b:95:0b:31:
                    b5:f7:f6:bc:20:f6:9a:60:11:d4:57:c8:48:58:33:
                    ee:e7:7c:9e:f9:96:5c:04:df:b7:0b:74:6c:35:1b:
                    64:d0:40:2e:0c:e4:9e:20:90:3a:fc:62:4c:aa:b8:
                    9e:83:68:d0:72:07:91:dd:73:3a:29:42:eb:f2:5b:
                    f0:26:81:6e:98:2b:28:63:2f:07:6b:58:98:5e:a9:
                    28:5c:bf:b0:1c:b1:7d:77:c9:0f:16:f3:57:28:b3:
                    23:6b:21:4a:f1:f6:62:3e:be:a5:7b:61:1e:30:c3:
                    27:02:74:56:72:07:62:e5:33:b9:da:c8:0c:50:96:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EA:5D:8B:10:CA:E9:7D:CC:21:E8:49:62:46:0D:FF:54:D7:31:2F
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:1a:f0:a7:89:f3:3d:46:69:f7:24:1f:f7:7a:75:f8:29:
         d6:8a:7b:d6:4b:62:88:10:4f:68:b4:6e:f5:2c:c2:e2:67:72:
         0c:32:5c:30:04:db:12:3b:b9:9d:f6:ef:4e:f5:06:9a:04:7d:
         af:66:d4:ad:69:0c:ff:c9:54:2d:61:ec:89:3d:5c:4c:7d:d7:
         4b:b1:cc:f4:17:61:f8:20:e2:78:12:5a:e0:28:dd:07:d7:b4:
         42:78:ca:ad:09:e5:0b:a5:8d:81:2c:b1:99:0b:73:e5:ae:ff:
         63:24:09:33:da:ae:52:20:94:5f:77:27:4a:33:36:5c:5d:c4:
         03:cd:b7:37:80:42:b8:69:fa:78:f3:57:7e:43:01:5b:52:0f:
         a7:25:33:70:1e:07:ad:0d:10:6a:8c:88:74:53:19:e0:88:4c:
         9c:10:02:a5:6e:eb:ad:13:10:9b:05:fd:52:98:10:49:83:6c:
         36:14:c4:f6:4c:66:88:4d:52:09:92:c9:21:0c:2f:56:a8:4f:
         f5:c3:88:6a:89:50:79:44:1b:13:dc:0b:09:cb:d7:8f:94:c0:
         d4:bf:06:54:5b:de:af:bc:42:27:9f:28:ac:72:23:c8:89:04:
         3a:fd:ad:e5:0b:24:b8:60:d4:dd:d8:76:e8:b5:5c:09:4e:af:
         35:d9:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:07 2025 by rpki-client